2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14023 | MEDIUM | 4.9 | 3.7% | Nov 6, 2017 | An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13... |
| CVE-2017-16541 | MEDIUM | 6.5 | 3.7% | Nov 4, 2017 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discove... |
| CVE-2017-16539 | MEDIUM | 5.9 | 1.8% | Nov 4, 2017 | The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, ... |
| CVE-2017-16534 | MEDIUM | 6.8 | 0.4% | Nov 4, 2017 | The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to ... |
| CVE-2017-16533 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause... |
| CVE-2017-16532 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause... |
| CVE-2017-16531 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-boun... |
| CVE-2017-16530 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and... |
| CVE-2017-16529 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a ... |
| CVE-2017-16528 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_d... |
| CVE-2017-16527 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_inter... |
| CVE-2017-16525 | MEDIUM | 6.6 | 0.4% | Nov 4, 2017 | The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows loca... |
| CVE-2017-15948 | MEDIUM | 4.8 | 0.6% | Oct 28, 2017 | Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in ... |
| CVE-2017-15947 | MEDIUM | 5.4 | 0.5% | Oct 28, 2017 | Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, ... |
| CVE-2017-5120 | MEDIUM | 6.5 | 1.1% | Oct 27, 2017 | Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Window... |
| CVE-2017-5118 | MEDIUM | 4.3 | 1.1% | Oct 27, 2017 | Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correc... |
| CVE-2017-5110 | MEDIUM | 6.5 | 1.4% | Oct 27, 2017 | Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior t... |
| CVE-2017-5109 | MEDIUM | 4.3 | 1.2% | Oct 27, 2017 | Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for... |
| CVE-2017-5107 | MEDIUM | 5.3 | 1.7% | Oct 27, 2017 | A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote att... |
| CVE-2017-5106 | MEDIUM | 6.5 | 1.3% | Oct 27, 2017 | Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android a... |
| CVE-2017-5105 | MEDIUM | 6.5 | 1.3% | Oct 27, 2017 | Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android a... |
| CVE-2017-5104 | MEDIUM | 6.5 | 1.4% | Oct 27, 2017 | Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker t... |
| CVE-2017-5103 | MEDIUM | 4.3 | 1.9% | Oct 27, 2017 | Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remot... |
| CVE-2017-5102 | MEDIUM | 4.3 | 1.9% | Oct 27, 2017 | Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowe... |
| CVE-2017-5101 | MEDIUM | 6.5 | 1.4% | Oct 27, 2017 | Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a rem... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now